path "ssh-host-signer/sign/hostrole" {
    capabilities = ["create", "update"]
}